$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa File: 34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa (raw, json) Hash identifier: yMbzrh1vL6xUkETmfKf98XpOE2WRDktjUEHwfIQyXsk= Subject key identifier: A0:90:B9:FC:ED:12:D0:8F:E8:70:DE:29:D0:DF:79:66:70:AA:3E:12 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19272491155B731F7429E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 198.41.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:72:49:11:55:b7:31:f7:42:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d329c17b-b04a-4f3e-b15f-db1df2539c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:5e:04:e7:89:fb:f6:c2:c9:c7:db:a4:1a: e4:cf:c8:2f:79:38:35:25:81:73:f3:9b:6d:0c:f4: a9:e3:09:f7:5d:46:a7:8b:7d:f0:c2:38:c6:95:ab: 91:2f:56:16:ad:2e:43:84:af:5e:59:ae:8f:c2:7d: 57:19:e5:d9:a8:96:b0:62:74:71:2c:4a:3d:85:89: 36:24:98:25:87:c4:b2:7a:6a:8a:76:6e:e5:09:16: 27:dd:9a:7a:67:db:dd:fb:b6:7e:86:02:56:dd:2e: 78:db:7b:56:7e:b0:9c:62:fb:a7:54:b4:02:8a:e7: 99:47:eb:fc:d6:8b:f9:4f:f3:b7:b4:4d:08:67:3b: a3:d1:68:6a:af:32:62:d8:f2:1b:b5:57:26:1a:cf: d4:27:e3:a1:c1:62:71:c9:ce:92:42:a7:20:b9:c3: 68:f6:b1:fe:f9:63:cb:d8:d4:8d:d2:2a:69:db:2f: 13:a4:ef:8d:7c:24:cc:2e:d1:bd:84:bf:19:33:63: 89:fa:85:8f:a6:92:60:c2:d1:c9:21:b8:74:13:c0: 09:b1:f6:ff:ca:88:48:0a:3c:e4:a9:29:f3:12:05: ee:6d:64:48:8f:cb:a1:3b:b7:06:30:4c:a2:9d:d1: 6b:b2:cd:bc:d5:d0:16:53:af:a4:f4:2a:de:b6:d1: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:90:B9:FC:ED:12:D0:8F:E8:70:DE:29:D0:DF:79:66:70:AA:3E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34e9f4bd-87ae-3e9d-a9b8-21773a91cf35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 198.41.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fa:2a:e5:4d:d3:0a:b3:82:b9:09:3d:b3:71:3b:d3:26:19: 4f:4d:d4:98:dd:95:46:aa:4c:91:b7:ba:60:3a:e8:19:3c:81: db:79:d0:fb:40:a8:09:8f:d3:e1:05:a6:94:c4:91:ec:8b:53: a1:44:b9:f5:63:a5:93:8d:6d:d1:68:29:67:e7:9c:01:2a:31: f2:d6:1b:cf:b9:41:f8:db:6c:d7:ba:ec:de:75:32:0f:56:b7: 7d:6a:55:7c:28:95:ba:54:4a:59:ec:28:9b:d7:99:a5:9d:9a: 95:ac:31:0c:e0:43:b1:88:0b:2a:bc:4e:78:19:09:7b:b0:71: 5e:f2:61:f7:81:dd:f1:d0:36:ab:4c:9a:2b:39:f7:46:04:37: 80:e6:d4:92:32:95:45:c1:46:3d:46:1f:ea:56:25:a3:39:64: c9:7b:4c:08:cf:08:e3:b4:19:2f:04:6a:89:a6:e9:93:f8:03: 59:9d:5a:db:0e:5c:2e:c1:c1:71:61:a6:e2:f8:68:3c:8e:78: 5f:ae:0b:95:3b:e2:d3:39:0f:33:93:f9:92:1b:b5:12:cb:82: f6:97:71:b3:a8:d7:bf:f5:e7:a5:bd:bc:60:d5:e9:22:47:73: c1:fc:d2:b8:cd:14:59:2f:1c:92:60:99:9a:8f:ae:e6:17:cf: be:c5:06:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknJJEVW3MfdCnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDMyOWMxN2ItYjA0YS00ZjNlLWIxNWYtZGIxZGYyNTM5YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgJeBOeJ+/bCycfbpBrkz8gveTg1JYFz85tt DPSp4wn3XUani33wwjjGlauRL1YWrS5DhK9eWa6Pwn1XGeXZqJawYnRxLEo9hYk2 JJglh8SyemqKdm7lCRYn3Zp6Z9vd+7Z+hgJW3S5423tWfrCcYvunVLQCiueZR+v8 1ov5T/O3tE0IZzuj0WhqrzJi2PIbtVcmGs/UJ+OhwWJxyc6SQqcgucNo9rH++WPL 2NSN0ipp2y8TpO+NfCTMLtG9hL8ZM2OJ+oWPppJgwtHJIbh0E8AJsfb/yohICjzk qSnzEgXubWRIj8uhO7cGMEyindFrss281dAWU6+k9CrettHe/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCQufztEtCP6HDeKdDfeWZwqj4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRlOWY0YmQtODdhZS0z ZTlkLWE5YjgtMjE3NzNhOTFjZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxinrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT6KuVN0wqzgrkJPbNxO9MmGU9N1JjdlUaqTJG3umA66Bk8gdt50PtA qAmP0+EFppTEkeyLU6FEufVjpZONbdFoKWfnnAEqMfLWG8+5QfjbbNe67N51Mg9W t31qVXwolbpUSlnsKJvXmaWdmpWsMQzgQ7GICyq8TngZCXuwcV7yYfeB3fHQNqtM mis590YEN4Dm1JIylUXBRj1GH+pWJaM5ZMl7TAjPCOO0GS8Eaomm6ZP4A1mdWtsO XC7BwXFhpuL4aDyOeF+uC5U74tM5DzOT+ZIbtRLLgvaXcbOo17/156W9vGDV6SJH c8H80rjNFFkvHJJgmZqPruYXz77FBi8= -----END CERTIFICATE-----Generated at Sat Nov 1 15:24:02 2025 by rpki-client